This role pays more than
90%
of similar roles. Most pay
$138,058–$184,900
— the shaded band above.
At the midpoint, this role pays about
$232k
versus about
$161k
for comparable roles.
Based on 240 similar postings.
Employer
About Wells Fargo
Wells Fargo & Company is one of the largest banks in the United States, providing banking, investment, mortgage, and consumer and commercial finance products and services nationwide. Industry: Banking & Financial Services
Wells Fargo currently has
55 open roles
on FindRole.
Listed pay typically runs
$119,000–$206,000
across 29 roles with salary data.
The Third Party Cyber Assurance Capability Lead serves as a technical leader within the Cybersecurity team, focused on advancing capabilities, processes, and frameworks for third-party cybersecurity assurance across the enterprise. This role involves leading cross-functional discovery and solution-design efforts to establish scalable monitoring, assurance automation, and continuous monitoring capabilities. The individual will develop assurance models, control-to-signal mappings, telemetry requirements, and risk indicators while managing strategic initiatives like Data Transmission Monitoring and risk attribution. Key technical competencies include evaluating technology architectures, cloud services, APIs, system integrations, and data flows. The role requires proficiency in using approved AI tools for research, analysis, and reporting while ensuring compliance with security standards. This position addresses the complex challenge of strengthening third-party cybersecurity risk oversight and improving operational efficiency through automated, data-driven risk analytics and advanced monitoring solutions.
Lead cross-functional discovery and solution-design efforts involving cybersecurity, engineering, architecture, and business stakeholders.
Establish and mature third-party cybersecurity assurance capabilities, including continuous monitoring and automation strategies.
Develop assurance models, control-to-signal mappings, telemetry requirements, and risk indicators for enhanced monitoring.
Translate complex technical concepts into scalable monitoring and reporting solutions for non-technical audiences.
Analyze complex technology ecosystems, data flows, and third-party service relationships to support risk oversight.
Lead strategic initiatives involving Data Transmission Monitoring (ARGUS), risk attribution, and assurance automation.
Present capability roadmaps and monitoring insights to leadership and governance forums.
Utilize approved AI tools to accelerate research, analysis, reporting, and documentation tasks.
What we're looking for
7+ years of Information Security Analysis experience or equivalent through work, training, military service, or education.
Ability to develop assurance models, control-to-signal mappings, telemetry requirements, and risk indicators for continuous monitoring.
Demonstrated ability to lead highly complex initiatives across multiple stakeholder groups.
Strong analytical, problem-solving, and critical-thinking skills to conduct independent technical research and assess emerging technologies.
Experience evaluating technology architectures, cloud services, APIs, system integrations, data exchanges, or monitoring technologies for risk management.
Strong understanding of cybersecurity monitoring, risk management, assurance, governance, or third-party risk management practices (preferred).
Experience with APIs, system integrations, data exchanges, observability, telemetry, or monitoring technologies (preferred).
Knowledge of cloud service providers, modern application architectures, SaaS platforms, and technology ecosystems (preferred).
Identity and Access Management
Continuous Control Monitoring
AI
Machine Learning
Data Analytics
Python
SQL
Power BI
Tableau
Alteryx
Cybersecurity
Risk Management
Governance
Automation
Reporting
SOX
ITGC
Cybersecurity
Third Party Risk Management
PCI DSS
NIST
ISO
Information Security
Risk Assessment
IT Operations Management
CISSP
CISA
CISM
CTPRP
CTPRA
CRISC